CVSS 3.1 Score 9.8 of 10 (high)


Published Jul 17, 2023
Updated: Jul 27, 2023
CWE ID 502


CVE-2023-26512 is a critical vulnerability classified under CWE-502 (Deserialization of Untrusted Data). It affects the rabbitmq-connector plugin module in Apache EventMesh (incubating) versions V1.7.0 to V1.8.0 on Windows, Linux, and macOS platforms. This vulnerability allows attackers to send controlled messages and execute remote code via rabbitmq messages. To remediate this issue, users can use the code under the master branch in the project repository, and a new version will be released soon. The vulnerability has a high risk score and severity level, with no privileges required and no user interaction necessary for exploitation. It has a low attack complexity but poses a high impact on integrity and confidentiality, as well as availability of the affected products.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-26512 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options